Maximum external power supply capacity AP-H3824-24DFG4XS24AE

A new generation of three-layer switches that integrate high performance, high security, and multiple services, and are applied to the Power over the Fiber Cable (PoF) solution to achieve integrated installation, operation, and maintenance of power supply/optical fiber signal transmission

Product characteristics:

Support for optoelectronic hybrid cables, applied to the Aurora PoF scheme, trouble-free remote power supply

Support VSU virtualization technology, flexible networking, and strong performance

Hardware level redundant backup design, high system reliability

Multiple security protection strategies to prevent network attacks and ensure the continuous robustness of the network

Cooperate with INC controller to achieve minimal operation and maintenance, and simple and efficient operation and maintenance management

● IPv4/IPv6 dual stack multi-layer switching

Product Overview

The AP-H3824 series switch is a new generation of three-layer switches launched by Anpson that integrates high performance, high security, and multiple services. It is mainly used in the aggregation layer to provide full line speed multi-layer switching, complete QoS policies, and hierarchical processing of different traffic flows based on different applications, ensuring no delay in important data transmission.

The AP-H3824 series switches are used in the Power over the Fiber cable (POF) scheme: they provide power and optical fiber signal transmission to the end of the extreme simple optical switch through hybrid optical cables. In order to achieve integrated installation, integrated operation and maintenance of power supply/optical fiber signal transmission, and ultimately achieve the goal of "reducing costs and increasing efficiency" in the construction of the park network.

AP-H3824 Series Switch External Management Interface Description:

MGMT interface: 10/100/1000M management Ethernet interface, using RJ45 interface standard. This interface can be used to connect to the Ethernet port of the computer for program download. Users can remotely manage and maintain the switch through this interface. When connecting to the computer Ethernet port, standard network cables can be selected.

USB port: Universal Serial Data Interface (USB), which can be connected to USB memory to store logs, host versions, alarms, and other diagnostic information. It can facilitate online upgrade of switch software and storage of log information.

Console port: Use RS-232 interface level and standard RJ45 connector. This interface is used to connect to the background terminal computer for system debugging, configuration, maintenance, management, and host software program loading.

DP port: DB78 interface. Each DB78 interface can provide 24 channels of low-voltage DC power externally. Each low-voltage DC power supply supplies power to external devices through a photoelectric hybrid cable.

Product characteristics

● Power supply/optical fiber transmission integration

The AP-H3824 series products are mainly used in the Anpson Ultra Simple Optical POF (Power over the Fiber Cable) solution. The biggest feature of the POF scheme is that in the traditional extremely simple optical scheme, the application scenario of optoelectronic hybrid cables is added to achieve the values of "centralized power supply for terminal equipment from the core computer room", "strong current free deployment for indoor switches", "ultra remote power supply for remote network equipment", "unified management of network and power supply systems", "extremely simple installation of extremely simple optical switches", and "saving engineering construction costs". It greatly saves CAPEX and OPEX for campus network construction.

● Perfect security protection strategy

ARP viruses or attacks are a relatively common type of attack in the network and have a significant impact. The AP-H3824 series switches support multiple modes of ARP spoofing prevention functions. Whether users automatically obtain addresses through a DHCP server or use a fixed IP address, the AP-H3824 series can record the user's true IP+MAC address, and when the switch port receives the ARP message sent by the host, it compares the ARP message content with the recorded IP+MAC address, and only forwards the ARP message with the true content, Discard fake ARP packets to shield ARP spoofing from the network and protect network users from ARP virus attacks.

Actively defend against various DD ○ S attacks in the network. Due to the openness of the network, computers are often infected with viruses, or personnel accessing the network attack network devices and servers for various purposes, resulting in the network being unable to function properly. More common examples include ARP flooding attacks that cause gateways to fail to respond to requests, ICMP flooding attacks that cause network equipment CPU loads to be too high to function properly, and DHCP request flooding attacks that cause DHCP server addresses to dry up and users to be unable to obtain IP addresses to access the network normally.

The AP-H3824 series provides an efficient hardware CPU protection mechanism: CPU Protection Policy (CPP), which performs flow differentiation and priority queue hierarchical processing for data flows sent to the CPU. It also implements bandwidth speed limits as needed, fully protecting the CPU from illegal traffic, malicious attacks, and resource consumption, ensuring CPU security, and fully protecting the security of the switch.

The AP-H3824 series provides innovative Network Foundation Protection Policy (NFPP) technology, which can limit the rate at which users send ARP messages, ICMP request messages, DHCP request messages, and other data packets to the network, discard messages that exceed the speed limit threshold, and even identify attacks and isolate users with attacks. Thereby protecting the basic network from the impact of network attacks and ensuring network stability.

DHCP snooping is supported, allowing only DHCP responses from trusted ports to prevent spoofing by private DHCP servers; Based on DHCP monitoring, through dynamic monitoring of ARP and checking the user's IP address, illegal messages that do not comply with binding table entries are directly discarded, effectively preventing ARP spoofing and user source IP address spoofing.

● Virtual Switching Unit (VSU)

AP-H3824 series products support Virtual Switching Unit (VSU). The ability to interconnect multiple physical devices and virtualize them into a single logical device, utilizing features such as a single IP address, a single Telnet process, a single command-line interface (CLI), automatic version checking, and automatic configuration for management. For users, it is just managing one device, but it achieves the efficiency and experience brought about by multiple devices.

Simplified management: Administrators can uniformly manage multiple switches without having to connect to each switch for configuration and management.

Simplify network topology: VSU is equivalent to a switch in the network, connected to peripheral devices through aggregation links. There is no two-layer loop, and there is no need to configure the MSTP protocol. Various control protocols operate as a switch.

Millisecond level fault recovery: VSUs and peripherals are connected through aggregated links. If one device or one member link fails, the time to switch to the other member link only takes 50 to 200 milliseconds.

High scalability: When users add new devices to or leave the virtualized network, they can achieve "hot swapping" without affecting the normal operation of other devices.

Protection investment: VSUs and peripherals are connected through aggregated links, providing both redundant links and load balancing, making full use of all network equipment and bandwidth resources. At the same time, a VSU virtual network system can be formed using any form of 10 gigabit port through any data transmission cable. There is no need to configure additional cables and expansion cards, and there are no restrictions on ports and cable types, maximizing the protection of user investment.

● High reliability

Support spanning tree protocols STP, RSTP, and MSTP, fully ensuring fast convergence, improving fault tolerance, ensuring stable network operation and link load balancing, using network channels rationally, and providing redundant link utilization.

Support Virtual Router Redundancy Protocol (VRRP) to effectively ensure network stability.

Support for the Rapid Link Detection Protocol (RLDP), which can quickly detect the on-off of links and the unidirectionality of optical fiber links, and support the loop detection function under the port to prevent network failures caused by loops formed by devices such as private hubs under the port.

Support for public Ethernet multi ring protection technology (ERPS), a two-layer link redundancy backup protocol designed according to international standards for core Ethernet. Its loop blocking and link recovery are centralized on the master device. Non master devices directly report their link conditions to the master device, without requiring processing by other non master devices. Therefore, loop interruption and recovery times are faster than STP. Based on the above differences, the link recovery capability of ERPS in an ideal environment can reach millisecond level.

When STP is not enabled, a fast uplink protection function can be provided through the Rapid Link Detection Protocol (RLDP). REUP allows users to provide basic link redundancy even when STP is turned off, while providing faster nanosecond fault recovery than STP.

BFD is supported, which can provide millisecond level detection and achieve rapid link detection. BFD can achieve rapid convergence of routing and other services through linkage with upper layer routing protocols, ensuring the sustainability of services.

● Software Defined Network (SDN)

The AP-H3824 series of products follow the development of the times and fully support OpenFlow 1.3. In the future, they can cooperate with Anpson's self-developed SDN controller to easily achieve large-scale two-layer and three-layer architecture networking, and support the smooth upgrade of the entire network to SDN networks. They support SDN solution features such as access control, visual operation and maintenance, which greatly simplifies the difficulty of network management while significantly reducing the cost of network maintenance.

● Green and energy-saving

The AP-H3824 series switches fully respond to the national call for green energy conservation, adopt various green energy conservation design concepts, and conduct in-depth research and exploration on the problems existing in traditional switches in terms of noise and energy consumption. This fully solves the problem of excessive energy consumption caused by the deployment of switches in the office environment due to high noise and the large-scale deployment of access equipment.

The AP-H3824 series switch adopts a new generation of hardware architecture, advanced energy-saving circuit design, and component selection. The overall power consumption of the device is significantly reduced, saving energy consumption for users and reducing noise pollution. The entire series of products are designed with axial flow variable speed fans. The equipment can intelligently control the fan speed based on the current temperature, ensuring stable operation of the equipment, while reducing power consumption and noise.

In the PoF power supply networking environment, AP-H3824 series products provide automatic mode and energy-saving mode for users to choose based on the actual needs of different users.

● Simple and easy network maintenance

The AP-H3824 series supports features such as SNMP, RMON, Syslog, sFLOW, and USB backup logs and configurations for daily network diagnosis and maintenance. At the same time, administrators can adopt diverse management and maintenance methods such as CLI, Web management, Telnet, and CWMP (TR069) zero configuration to facilitate device management.

The PoF usage status is clear at a glance: The panel comes with a PoF button that allows you to view the current communication status and power supply status of the device with a single click, allowing you to have a clear understanding of the PoF power supply status of all ports.

Support GRPC based Telemetry technology to achieve periodic collection of CPU, memory, and other information.

The hardware supports IPv4/IPv6 dual stack multi-layer wire speed switching. The hardware distinguishes and processes IPv4 and IPv6 protocol messages, and can plan the network or maintain the current status of the network based on the needs of the IPv6 network, providing a flexible IPv6 network communication scheme. Support a variety of innovative IPv4 routing protocols, including static routing, RIP, OSPFv2, IS-ISv4, BGP4, etc., to meet the needs of users in different network environments to choose appropriate routing protocols and flexibly establish networks. At the same time, it supports a variety of IPv6 routing protocols, including static routing, RIPng, OSPFv3, IS-ISv6, BGP4+, etc. Whether upgrading an existing network to an IPv6 network or creating a new IPv6 network, it is flexible to choose suitable routing protocols to form a network.